This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e21f1-be01-3eed-b70b-7e89b149fa70.roa File: 152e21f1-be01-3eed-b70b-7e89b149fa70.roa (raw, json) Hash identifier: bT6mc+FQMBuff0FEBrkvMaTvj9rOu/nVj06+8g824nE= Subject key identifier: D2:65:B0:FC:3B:92:AA:74:90:2C:45:5C:A6:66:38:5F:0B:E4:84:FF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC805A78275B0D7619113CD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e21f1-be01-3eed-b70b-7e89b149fa70.roa Signing time: Fri 07 Nov 2025 14:00:38 +0000 ROA not before: Fri 07 Nov 2025 14:00:38 +0000 ROA not after: Thu 05 Feb 2026 14:00:38 +0000 asID: 396597 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c8:05:a7:82:75:b0:d7:61:91:13:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 7 14:00:38 2025 GMT Not After : Feb 5 14:00:38 2026 GMT Subject: CN=05c3e082-7299-4034-a527-9c8b2d7e2463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:dd:eb:23:09:a7:48:5c:93:c6:f3:3d:77: d0:c2:76:7e:20:20:9b:ad:e3:ff:f6:a7:eb:aa:cb: 4a:2e:9d:4c:b3:a7:c9:0c:ed:a8:b6:92:7f:52:bc: ab:0e:df:b1:04:e4:2a:26:ec:82:2f:b9:bc:8a:57: 96:eb:e1:65:64:f5:df:30:4c:49:1f:d5:4c:cb:7b: 5b:88:a1:db:53:91:60:3e:5f:cb:7e:79:60:e5:fb: bc:03:11:dc:90:7c:f0:53:31:a8:36:4f:30:3c:82: 69:90:94:b0:0b:01:2d:c6:2c:af:ca:0b:2a:3d:a9: f0:10:05:82:c7:6c:9a:da:41:cf:90:2e:ba:6d:3b: 6a:93:45:eb:57:40:9d:9e:f4:81:b8:be:1f:a7:94: 18:42:34:a2:2c:f5:9d:8c:65:24:fc:25:78:55:68: 56:4b:a7:aa:d9:4d:fc:e5:36:41:8e:08:2c:27:3c: 43:7a:fc:4e:33:af:f6:ad:ad:55:3b:c4:7c:6f:19: d9:4c:7e:62:2a:a9:83:e6:cd:52:2b:aa:fc:9a:38: 5a:d2:9f:03:2a:9c:02:3b:59:9a:b6:f4:d2:0d:78: 55:d7:bd:11:86:80:5c:3b:b6:66:46:05:56:7f:43: e8:c4:72:fa:0c:83:61:8b:35:61:27:6e:a8:5c:2a: 9a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:65:B0:FC:3B:92:AA:74:90:2C:45:5C:A6:66:38:5F:0B:E4:84:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e21f1-be01-3eed-b70b-7e89b149fa70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:42:11:68:15:28:cd:a8:d0:e7:9d:bc:87:a6:21:0f:33:5b: 28:16:8a:46:a0:18:c9:f2:d4:ab:06:f6:81:20:eb:91:a4:ac: 53:78:d9:b4:3c:00:29:67:ad:9f:d4:30:e9:1c:44:5a:18:20: 81:11:92:6c:b6:63:9e:54:5e:eb:c8:e8:53:74:b9:35:37:d0: f4:7f:ef:59:86:b0:dc:c4:32:e9:55:db:32:c2:b0:00:55:b5: f3:eb:25:ac:10:1a:1e:2b:29:6b:fc:89:da:22:9f:e5:d1:99: 2a:58:92:3a:69:00:25:b1:f7:af:e3:23:cf:1f:bb:1d:09:41: e2:59:74:99:2b:2e:13:71:c3:d6:04:5a:49:73:43:17:52:ca: 56:5c:17:be:fd:69:2a:1b:b6:77:57:1b:94:2c:d6:b9:16:c6: cb:61:e0:4e:ab:f7:fa:a0:58:0e:c6:ea:02:81:ce:5c:6d:d0: f7:23:55:97:19:d2:01:7a:9a:7a:9e:20:75:fb:5b:70:b5:58: 83:a6:6b:c1:bf:18:81:b4:73:04:d1:2a:f3:2c:86:8a:0d:fc: e2:03:48:17:45:d4:73:8d:61:b6:eb:e4:48:bd:fc:42:e0:8a: fb:db:64:ff:52:2b:9c:29:be:b8:8f:3c:d6:37:9c:8d:6d:75: 98:1b:68:21 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvIBaeCdbDXYZETzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNzE0MDAzOFoXDTI2MDIwNTE0MDAzOFowLzEtMCsGA1UEAxMk MDVjM2UwODItNzI5OS00MDM0LWE1MjctOWM4YjJkN2UyNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqard6yMJp0hck8bzPXfQwnZ+ICCbreP/9qfr qstKLp1Ms6fJDO2otpJ/UryrDt+xBOQqJuyCL7m8ileW6+FlZPXfMExJH9VMy3tb iKHbU5FgPl/Lfnlg5fu8AxHckHzwUzGoNk8wPIJpkJSwCwEtxiyvygsqPanwEAWC x2ya2kHPkC66bTtqk0XrV0CdnvSBuL4fp5QYQjSiLPWdjGUk/CV4VWhWS6eq2U38 5TZBjggsJzxDevxOM6/2ra1VO8R8bxnZTH5iKqmD5s1SK6r8mjha0p8DKpwCO1ma tvTSDXhV170RhoBcO7ZmRgVWf0PoxHL6DINhizVhJ26oXCqaAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNJlsPw7kqp0kCxFXKZmOF8L5IT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTUyZTIxZjEtYmUwMS0z ZWVkLWI3MGItN2U4OWIxNDlmYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCoQhFoFSjNqNDnnbyHpiEPM1soFopGoBjJ8tSr BvaBIOuRpKxTeNm0PAApZ62f1DDpHERaGCCBEZJstmOeVF7ryOhTdLk1N9D0f+9Z hrDcxDLpVdsywrAAVbXz6yWsEBoeKylr/InaIp/l0ZkqWJI6aQAlsfev4yPPH7sd CUHiWXSZKy4TccPWBFpJc0MXUspWXBe+/WkqG7Z3VxuULNa5FsbLYeBOq/f6oFgO xuoCgc5cbdD3I1WXGdIBepp6niB1+1twtViDpmvBvxiBtHME0SrzLIaKDfziA0gX RdRzjWG26+RIvfxC4Ir722T/UiucKb64jzzWN5yNbXWYG2gh -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:14 2025 by rpki-client